Commit Graph

4799 Commits

Author SHA1 Message Date
espie
6a383c71cd fix FULLPKGPATHs 2010-02-26 18:31:57 +00:00
sthen
3d9f13534b bump PKGNAMEs, the httpd abi changed, resulting in segfaults after
updating httpd until newly-built packages are installed.

ok espie@
2010-02-26 14:45:02 +00:00
robert
f43f8ed99e Install the tmp dir in the chroot with stricter permissions and change
owner to the www users.

ok ajacoutot@
2010-02-25 09:05:04 +00:00
naddy
2c0af6bc4f SECURITY update to 3.0.18:
MFSA 2010-05 XSS hazard using SVG document and binary Content-Type
MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain
MFSA 2010-03 Use-after-free crash in HTML parser
MFSA 2010-01 Crashes with evidence of memory corruption

Also fix some corrupted $OpenBSD keywords, pointed out by sthen@

ok sthen@
2010-02-24 18:17:23 +00:00
sthen
f13bb86663 SECURITY update to Firefox 3.5.8. Same diff from naddy@ and Daniel Dickman.
Update sqlite dependency while there.

ok naddy@
(reminder, ports is not fully open, do not commit without specific permission)
2010-02-24 16:59:49 +00:00
sthen
f2d5b5ba92 SECURITY fix, add patches from upstream to avoid a buffer overflow with
long URLs. Based on a diff from "iridium", similar diff from maintainer.
ok jasper@
2010-02-09 13:44:28 +00:00
jasper
d904463d52 saying pkg_arch=* when invoking cc is wrong wrong wrong
ok ajacoutot@
2010-02-06 22:15:21 +00:00
ajacoutot
c991d74a35 While I'm still unsure why gamin is needed at all, at least use a
correct run_depends: we mean gamin, not libgamin.

"go ahead" jasper@
2010-02-03 12:32:54 +00:00
jasper
82012ecbfd SECURITY FIX for CVE-2010-0308, "Squid DNS Packet Processing
Denial of Service Vulnerability"

brad (MAINTAINER) came up with the same diff
ok ajacoutot@ sthen@
2010-02-03 06:41:17 +00:00
pvalchev
7bfaeca2b9 gamin RUN_DEPENDS, from speedvin@archlinux.us; ok jasper espie 2010-02-03 01:05:41 +00:00
sthen
639fea5f60 SECURITY fix for CVE-2010-0295 DoS issue.
http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt

From Brad, ok ajacoutot@ jasper@
2010-02-02 08:10:29 +00:00
espie
100f0c7870 SUBDIR += is wrong: it means the makefile will pick up SUBDIR from env, thus
breaking cd /usr/ports && SUBDIR=some/path make something for
category makefiles. While there, also put spaces around += uniformously.
okay naddy@, jasper@
2010-02-01 17:00:12 +00:00
jolan
ca7dbb81a7 fix MASTER_SITES, ok naddy@ 2010-01-30 19:08:30 +00:00
naddy
72b44c5513 bump PKGNAME for PLIST changes 4.6 -> 4.7 2010-01-27 21:43:27 +00:00
sthen
77516f5da3 Mention in MESSAGE that this package currently requires SSE2,
and show how to check. This should change sometime, but the
fix is fiddly and for now we should let people know. Committing
now to make sure something is in pre-4.7.

Discussed with pval, this diff ok jasper@ landry@
2010-01-26 15:48:21 +00:00
landry
1cbf5cc3c8 Add gstreamer plugins-ffmpeg & plugins-good to RUN_DEPENDS, somehow i
forgot it when updating to 1.1.18. This will be needed for the day HTML5
video actually works in webkit-based browsers..
ok espie@ jasper@
2010-01-23 10:14:37 +00:00
landry
26e100eda6 Add a patch to fix a use-after-free & a memory leak, from canacar@.
Fwded' and commited upstream.
ok jasper@ sthen@ no objection ajacoutot@
2010-01-19 14:25:08 +00:00
jasper
df30126d85 SECURITY FIX for CVE-2009-4427
phpLDAPadmin "cmd" Local File Inclusion Vulnerability

ok ajacoutot@
2010-01-13 14:36:52 +00:00
ajacoutot
d16d96252f SECURITY: CVE-2009-4489
http://www.vupen.com/english/advisories/2010/0090
(thanks fgsch@ for the link/notice)

Update to cherokee-0.99.39.
Remove debug FLAVOR and use ifdef DEBUG.
Add rrdtool to run_depends.
Byte-compile python modules so that they are registered in the PLIST.

Be careful as cherokee is not started using ${PREFIX}/sbin/cherokee, not
cherokee-guardian anymore.

Fernando Quintero (maintainer) ok
MESSAGE tweak and ok sthen@, ok jasper@
2010-01-13 08:47:57 +00:00
stephan
a4961caa75 - fix licence version
- tweak do-install (no change of PLIST)

ok sthen@ and landry@
2010-01-11 12:48:01 +00:00
stephan
84fdef559b use ${INSTALL_DATA} instead of @mv
reported by naddy@, almost identical diff + help from landry@
2010-01-11 10:45:53 +00:00
msf
1c9d24fcc9 bump PKGNAME again
requested by naddy@
2010-01-11 00:28:06 +00:00
landry
ca1f030fd3 Update to webkit 1.1.18:
- add a pair of patches to make it finally run without SIGBUS on sparc64
  (yay!), reported as https://bugs.webkit.org/show_bug.cgi?id=19775
- add a patch to disable some optimizations on ppc, so that it finally
  builds fine, reported as https://bugs.webkit.org/show_bug.cgi?id=33451
2010-01-10 20:06:17 +00:00
ajacoutot
977a59ba5c +py-htmltmpl 2010-01-10 13:59:14 +00:00
ajacoutot
61e32cf598 Import py-htmltmpl-1.22.
The purpose of the templating engine is to provide web application
developers, who need to separate program code and design (HTML code) of
their web application projects, with a templating tool that can be
easily used by cooperating webdesigners who have no programming skills.

Templating language provided by the engine is inspired by Perl
templating module HTML::Template. Templates created for HTML::Template
can be used with this engine in case they do not violate character case
rules of htmltmpl.

This package includes easydoc, a module which uses the templating engine
to generate HTML documentation from docstrings embedded in source files
of Python modules.


(needed by GNOME Development Monitor which I'm currently working on)
2010-01-10 13:58:06 +00:00
espie
b87f5ba044 update to more recent version, removes the waits during regress... 2010-01-10 13:45:03 +00:00
fgsch
f50c84fc13 Remove file imported by mistake. spotted by ajacoutot 2010-01-10 13:37:15 +00:00
fgsch
37dfdf0207 Enter py-mako and py-pylons. 2010-01-10 13:18:04 +00:00
fgsch
e1568d200f Import pylons 0.9.7, a rapid web application development framework. 2010-01-10 13:17:18 +00:00
fgsch
9f7f8fe969 Import Mako 0.2.5, a super-fast templating language. 2010-01-10 13:15:36 +00:00
fgsch
19a8400d7f Enter py-beaker 2010-01-10 13:01:51 +00:00
fgsch
c07da4e620 Import Beaker 1.5.1, a session and caching library with wsgi middleware 2010-01-10 12:59:22 +00:00
fgsch
f3c258c001 Update to WebOb 0.9.7.1. 2010-01-10 12:37:02 +00:00
fgsch
3b84802320 Update to WebTest 1.2 2010-01-10 12:36:35 +00:00
fgsch
399907446d Update to WSGIProxy 0.2 2010-01-10 12:36:06 +00:00
fgsch
7e30609618 Update to Routes 1.11 2010-01-10 12:35:28 +00:00
msf
0e3875c541 bump PKGNAME after MAINTAINER change
pointed out by naddy@
2010-01-10 08:46:49 +00:00
msf
16a1fd2dbf fix the dependency for dm-migrations and bump PKGNAME
pointed out by naddy@
2010-01-10 08:46:04 +00:00
fgsch
12329736e4 Update to repoze.profile 1.1. 2010-01-09 01:12:03 +00:00
fgsch
d016f18f8c Update to meld3 0.6.6 2010-01-09 01:11:23 +00:00
fgsch
eefd845627 Update to Tempita 0.4 2010-01-09 01:10:00 +00:00
kevlo
7d98d836e5 Update to 2.9.1
ok merdely@
2010-01-08 15:30:53 +00:00
stephan
5ac8dd3605 +mediawiki-httpauth 2010-01-08 13:22:28 +00:00
stephan
360c34a5c6 import mediawiki-httpauth-0.1
This extension works with MediaWiki instances setup behind HTTP
authentication. It pulls usernames from $_SERVER['PHP_AUTH_USER'].
The extension will then either log the user on to MediaWiki if the
user name exists in the database or create a new user if it does not.

"ok with me" jasper@, "yeah hell import it" landry@
2010-01-08 13:15:38 +00:00
jasper
7fe4d8bde1 - fix location of README.OpenBSD
spotted by viq
2010-01-06 21:54:04 +00:00
naddy
7ef0c5c7ee minor reliability update to 3.0.17 2010-01-06 14:37:35 +00:00
jasper
9dd125cf1b - add p5-WWW-Ebay 2010-01-06 09:46:37 +00:00
jasper
5c55f6991b import p5-WWW-Ebay 0.091
Collection of eBay-related modules.
2010-01-06 09:44:21 +00:00
jasper
deda363f2d - missing regress dependency 2010-01-06 09:32:46 +00:00
jasper
a00e7e92a2 - update WWW::Search::Ebay to 3.015 2010-01-06 09:27:38 +00:00